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O (57) Abstract: The repeater of the present invention communicates data signals over power lines. The repeater of one embodiment 
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Q key. If the packet is successfully decrypted using the first encryption key, the packet is encrypted using the second encryption and 
^ transmitted over the power line. If the packet is successfully decrypted using the second encryption key, the packet is encrypted 
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wo 2004/102868 



PCTAJS2004/014332 



A POWER LINE COMMUNICATION DEVICE AND METHOD OF USING THE SAME 

m 

*l 

FIELD OF THE INVENTION 

[0001] The present invention relates, generally, to power line communication 
devices and in particular, to a communication device for repeating data signals on 
power lines. 

BACKGROUND OF THE INVENTION 

[0002] Well-established power distribution systems exist throughout most of the 

United States, and other countries, that provide power to customers via power lines. 

With some modification, the infrastructure of the existing power distribution systems can 

be used to provide data communication in addition to power delivery, thereby forming a 

power line communication system (PLCS), In other words, existing power lines that 

already have been run to many homes and offices can be used to carry data signals to 

and from the homes and offices. These data signals are communicated on and off the 

power lines at various points in the power distribution communication system, such as, 

for example, near homes, offices, Internet service providers, and the like. 

i 
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[0003] While the concept may sound simple, there are many challenges to 
overcome in order to use power lines for data communication. Power distribution 
systems Include numerous sections, which transmit power at different voltages. The 
transition from one section to another typically is accomplished with a transfomner. The 
sections of the power line distribution system that are connected to the customers 
typically are low voltage (LV) sections having a voltage between 100 volts and 240 
volts, depending on the system. In the United States, the low voltage section typically is 
about 120 volts (120V). The sections of the power distribution system that provide the 
power to the low voltage sections are referred to as the medium voltage (MV) sections. 
The voltage of the MV section is in the range of 1,000 Volts to 100,000 volts and 
typically 8.66 kilo volts (kV) to neutral (15 kV between phase conductors). The 
transition from the MV section to the LV section of the power distribution system 
typically is accomplished with a distribution transformer, which converts the higher 
voltage of the MV section to the lower voltage of the LV section. 

[0004] Power system transfonners are one obstacle to using MV or LV power 
distribution lines for data communication. Transformers designed for conversion of 
voltages at power frequencies (I.e. 50 or 60Hz) present complex and often undesirable 
series and shunt impedances that can be detrimental to data signal frequencies useful 
for data communication. As such, power distribution communication systems face the 
challenge of passing the data signals around (or sometimes through) the distribution 
transformers. 

[0005] Many power lines, including both LV (external and the internal customer 

premise power line wiring) and MV power lines, provide a high impedance 

communication channel for high frequency data signals thereby significantly attenuating 

data signals. In addition, power lines may provide a very noisy communication channel 

and such noise is often sporadic and unpredictable. Thus, due to the limited power that 
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may be used to transmit data signals on power lines (for example, due to Federal 
Communication Commission (FCC) regulations regarding RF emissions), high 
frequency data signals will only propagate a finite distance that in some instances may 
not be far enough from the transmitting source to be reliably received by the intended 
communication device. 

[0006] Thus, there is a need for a power line communication device to extend 
the range of communications of a power line communication (PLC) device. Such a 
device should be designed to facilitate bi-directional communication. In addition, the 
device (or repeater as sometimes referred to herein) should enable the transmission 
and reception of broadband radio frequency (RF) signals used for data transmission 
over high voltage (HV), MV and LV power lines, including the Internal customer premise 
wiring. Finally, it is desirable to design such a repeater to be installed without the need 
to disconnect power from the power lines. 

SUMMARY OF THE BWENTION 

[0007] The device of the present invention communicates data signals over 
power lines. The repeater of one embodiment comprises at least one modem that 
receives a data packet and attempts to decrypt the data packet with a first and/or 
second encryption key. If the packet is successfully decrypted using the first encryption 
key, the packet is encrypted using the second encryption and transmitted over the 
power line. If the packet is successfully decrypted using the second encryption key, the 
packet is encrypted using the first encryption and transmitted over the power line. The 
use of multiple encryption keys creates multiple logical networks. 

[0008] Further features and advantages of the present invention, as well as the 

f 

structure and operation of various embodiments of the present invention, are described 
in detail below with reference to the accompanying drawings. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0009] The accompanying drawings, wfiich are incorporated herein and fomi 
part of the specification, illustrate various embodiments of the present invention and, 
together with the description, further serve to explain the principles of the invention and 
to enable a person skilled in the pertinent art to make and use the invention. In the 
drawings, like reference numbers indicate identical or functionally similar elements. 

[0010] A more complete appreciation of the invention and many of the 
attendant advantages thereof will be readily obtained as the same becomes better 
understood by reference to the following detailed description when considered in 
connection with the accompanying drawings, wherein: 

[001 1 ] FIG. 1 a is a schematic of an example PLCS employing an example 
embodiment of a communication device according to the present invention; 

[0012] FIG. 1 b is a schematic of another example PLCS employing an example 
embodiment of a communication device according to the present invention; 

[0013] FIG. 2 is a schematic of an example embodiment of a communication 
device according to the present invention; 

[0014] FIG: 3 is a schematic of another example embodiment of a 
communication device according to the present invention; 

[0015] FIG. 4 is a schematic of another example embodiment PLCS employing 
an example embodiment of a communication device according to the present invention; 
and 

[0016] FIG. 5 is a schematic of a portion of an example embodiment of a 
communication device according to the present invention. 
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DETAILED DESCRIPTION OF ILLUSTRATIVE EMBODIMENTS 

[0017] In the following description, for purposes of explanation and not 

limitation, specific details are set forth, such as particular networks, communication 

systems, computers, terminals, devices, components, techniques, data and network 

protocols, software products and systems, enterprise applications, operating systems, 

development interfaces, hardware, etc. in order to provide a thorough understanding of 

the present invention, 

[001 8] However, it will be apparent to one skilled in the art that the present 

invention may be practiced in other embodiments that depart from these specific details. 

Detailed descriptions of well-known networks, communication systems, computers, 

temiinals, devices, components, techniques, data and networi< protocols, software 

products and systems, operating systems, development interfaces, and hardware are 

omitted so as not to obscure the description of the present invention. 

I. System Architecture and General Design Concepts 

[0019] The repeater of the present invention may be used to communicate data 

over LV, MV, or HV power lines and to communicate with any PLC device such as a 

transformer bypass device, a backhaul point, another repeater, a power line modem or 

any other device communicatively coupled to the power line. The present invention 

may be used to communicate data signals over both underground and overhead power 

lines. In addition, the present invention also may be communicatively coupled to LV 

power lines inside the customer premises (e.g., at a wall socket) (an indoor repeater) or 

external to the customer premises (an outdoor repeater). The outdoor repeater may be 

installed on the exterior of, or adjacent to, the customer premises or may be installed 

near, or adjacent to, the distribution transformer serving the customer premises (e.g., on 

a utility pole or inside a transfonner enclosure). As will be discussed in detail below, the 

-5- 



wo 2004/102868 PCT/US2004/0 14332 

repeater may provide communications for a plurality of user devices tfiat may located in 
different (or the same) customer premises. 

[0020] Fig. 1a is a schematic of an example embodiment of a PLC system 
employing a repeater 100 according to the invention that is designed to repeat data 
signals over the LV power lines. The repeater 1 00 in this topology is positioned inside 
the customer premises and may be plugged into a wall socket that preferably, although 
not necessarily, is near the breaker box so that the repeater 1 00 is near the location at 
which the LV power line enters the customer premises and where the data signals are 
strong enough to be reliably received by the repeater 100. Altemately, the repeater 100 
may be communicatively coupled to the LV power line at the breaker box (e.g., inside 
the box) or coupled to the external LV power lines on the outside of the customer 
premises. 

[0021] As shown in Figure la, the topology includes a user communication 

» 

■ 

device 70 connected to a power line modem 50. The user communication device 70 

may be any device capable of supplying data for transmission (or for receiving such 

data) including, but not limited to a computer, a telephone, a telephone answering 

machine, a fax, a digital cable box (e.g., for processing digital audio and video, which 

may then be supplied to a conventional television and for transmitting requests for video 

programming), a video game, a stereo, a videoplidne, a television (which may be a 

digital television), a video recording device, a home network device, a utility meter, a 

home security system, or other device. 

[0022] The user communication device 70 is communicatively coupled to the 

power line modem 50 (sometimes known as a power line interface device), which is 

well-known in the art. in some instances, the power line modem 50 may be integral to 

the user device. The power line modem 50 serves as an interface for user devices to 

access the PLC system. The power line modem 50 can have a variety of interfaces for 
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user communication devices data. For example, a power line modem 50 can include a 
RJ-1 1 Plain Old Telephone Service (POTS) connector, an RS-232 connector, a USB 
connector, a 10 Base-T connector, RJ-45 connector, coaxial connector, optical fiber 
connector, and tlie like. In this manner, a customer can connect a variety of user 
devices to the PLCS. Further, multiple power line modems can be plugged into power 
outlets throughout the customer premises 1 5, with each power line modem 50 
communicating over the same wiring internal to the customer premises 15. 

[0023] Data received by the repeater 1 00 from the PLC device 60, which as 
discussed above may be a transformer bypass device, another repeater 100, a 
communication interface device, or other device, may be repeated for reception by the 
power line modem 50 and subsequent reception by the user communication device 70. 
Data received by the repeater from the power line modem 50 (e.g., originating forni the 
user communication device 70) may be repeated for reception by the PLC device 60. 

[0024] Figure 1 b is a schematic of another example PLCS employing the 
invention. In this embodiment, the repeater 100 is communicatively coupled to the MV 
power line and provides bi-directional communications between a backhaul point 10 and; 
a transformer bypass device 30. It will be evident to those skilled in the art that various 
embodiments of the present invention may be used to provide communications between 
any two or more PLC devices. 

[0025] Figure 2 illustrates an example embodiment of the present invention, 

which is comprised of a first modem 110 and a second modem 1 1 1 that are 

communicatively coupled to each other via communication path 1 12, which may be an 

Ethernet bus or other form of communication interface. In addition, both modems 1 1 0 

and 1 1 1 are communicatively coupled to the power line via coupler 115. In this 

embodiment, coupler 115 may be a conventional three prong wall plug. Although not 

shown in Figure 2, this embodiment also includes a power supply that receives power 
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from the LV power line to which the repeater 100 is coupled (and through which the 
repeater 100 provides communications) and supplies power to the modems. 

[0026] The modems 1 1 0 and 1 1 1 may include a moduiator, demodulator, an 
encryption module and a decryption module. In addition, the modems also may include 
one or more additional functional submodules such as an amplifier, one or more filters, 
an Analog-to-Digital Converter (ADC), Digital-to-Analog Converter (DAC), a memory, 
source encoder/decoder, an error encoder/decoder, a channel encoder/decoder, a MAC 
(Media Access Control) processor. These additional functional submodules may be 
omitted in some embodiments, may be integrated into a modem integrated circuit (chip 
or chip set), or may be peripheral to a modem chip. In the present example 
embodiment, the modems 110 and 1 1 1 are formed, at least in part, by part number 
INT51X1, which is an integrated power line transceiver circuit incorporating most of the 
above-identified submodules, and which is manufactured by Intellon, Inc. of Ocala, 
Florida. 

[0027] The incoming power line data signal from the coupler 1 1 5 is supplied to 
each modem where the RF data signal is extracted from the power signal (e.g.. by a 
high pass filter) and supplied to the ADC of each modem, which converts the incoming 
RF analog signal to a digital signal. The digital signal is then demodulated. Each 
modem may then attempt to decrypt the packet. After the decryption algorithm is 
executed, the modem will perfonn a validation procedure. Validation procedures are 
well known in the art and used to detemiine the validity of the decrypted packet and 
may be comprised of a cyclic redundancy check (CRC), a check sum validation, or any 
other such procedure. 

[0028] If the validation procedure fails, the packet is discarded (ignored). If the 
validation procedure passes, the modem may provide source decoding, enror decoding. 
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channel decoding, and/or MAC processing, if appropriate, all of which are known in the 
art and, therefore, not explained In detail here. 

[0029] In this example embodiment of the invention, the first modem 1 10 is 
assigned a first encryption key and the second modem 11 1 is assigned a second 
encryption key that is different from the first encryption key. The encryption key is 
stored in the memory of the modem and used to encrypt and decrypt power line data 
signals. 

[0030] Packets transmitted over the LV power line by and to the PLC device 60 
are encrypted (and decrypted) using the first encryption key. Packets transmitted by 
and to the power line modem 50 are encrypted (and decrypted) using the second 
encryption key. 

[0031] During operation, the PLC device 60, which may be a transformer 
bypass device, a backhaul point, another repeater 1 00, a communication interface 
device (as described below), or other device, may receive the data packet (e.g., from a 
remote source), encrypt the data packet using the first encryption key, and transmit the 
data packet on the power line (which may include error coding, channel coding, 
modulating the packet, converting the digital signal to analog, and other process steps 
associated with transmitting). Modem 1 1 0 and modem 1 1 1 receive the data packet, 
demodulate the data packet and attempt to decrypt the packet However, only the first 
modem 110 successfully decrypts the data packet because the first modem 110 has the 
con-ect encryption key for decrypting the packet. Consequently, the validation 
procedure of the first modem 1 1 0 passes and the validation procedure of the second 
modem 1 1 1 fails (because the second modem does not have the correct key for 
decryption). The second modem therefore discards the packet. 

[0032] The first modem performs the additional processing of the packet as is 

necessary, which may comprise source decoding, error decoding, channel decoding, 
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and/or MAC processing. The packet is then transmitted via data path 1 12 to the second 
modem 111. The second modem may provide IVIAC processing channel encoding, 
source encoding, error encoding, and encryption. The encryption by the second 
modem 11 1 is performed using the second encryption key. The data is then modulated 
and provided to the DAC to convert the digital data to an analog signal for transmission 
through the coupler 1 15 onto the power line. 

[0033] Both the PLC device 60 and the power line modem 50 may receive the 
packet transmitted by the repeater 100. In addition, the first modem 110 may receive 
the packet as well. However, the decryption of the data packet by PLC device 60 (and 
first modem 1 1 0) will result in a packet that fails to pass the validation procedure 
because the packet has been encrypted using the second encryption key (while the 
PLC device and first modem 1 10 use the first encryption key to decrypt the packet). 
The power line modem 50 will successfully decrypt the packet and, therefore, may pass 
the data to the user communication device. 

[0034] Transmissions from the power line modem 50 will likewise be decrypted 
by the second modem 1 1 1 (using the second encryption key) and not by the first 
modem 1 1 0. The second modem 1 1 1 will transmit the decrypted data packet to the first 
modem 110, which will encrypt the data packet using the first encryption key, and 
subsequently transmit the data packet over the power line. The transmitted data packet 
may be received by the PLC device 60, the power line modem 50, and perhaps the 
second modem 111. The power line modem 50 (and second modem 1 1 1 ) vwll attempt 
to decrypt the packet using the second encryption key and fail the validation procedure. 
The PLC device 60 will successfully decrypt the packet and, if appropriate, transmit the 
packet through the PLC network or other network. 

% 

[0035] This embodiment of the invention may receive and repeat every data 

packet that the device successfully decrypts. Alternately, the invention may be 
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configured to repeat only select data packets such as those successfully decrypted and 
having the correct MAC address (or IP address). Thus, different repeaters in different 
customer premises may use the same set of encryption keys, but have different MAC 
addresses (or IP addresses) so that the repeater having the MAC address (or IP 
address) that corresponds to the destination address of the packet is the only repeater 
that repeats the data packet. Each modem may have its own MAC address (and/or IP 
address stored in memory). 

[0036] As shown in Figure 1 b, another example embodiment of the repeater 
100 for communicating over MV power lines may provide communications between a 
backhaul point 10 and a transformer bypass device 30. Thus, the backhaul point 10 
and first modem 110 may encrypt and decrypt using a first encryption key. Similarly, 
the transformer bypass device 30 and second modem 1 1 1 may encrypt and decrypt 
using a second encryption key. The process steps for this embodiment would be similar 
to those described above with respect to Figure la and therefore, are not repeated 

■ 

here. 

[0037] The embodiments of the present invention coupled to the MV power line 
(such as in Figure 1b) may use a coupler and signal conditionirig circuitry described in 
U.S. Patent Appl. No. 10/348.164 entitled "Power Line Coupling Device and Method of 
Using the Same" filed January 21, 2003 and U.S. Patent Appl. No. 10/385,899 entitled 
"Device and Method for Coupling with Electrical Distribution Network Infrastructure to 
Provide Communications" filed March 10, 2003, which are hereby incorporated by 
reference. These incorporated applications also describe PLC devices, including some 
with wireless and power line communication capabilities such as a communication 
interface device, for which the present invention may provide communications. 

[0038] . Another embodiment of the present invention shown in Figure 3 further 

includes a router 120 for controlling the flow of data packets through the repeater 100. 
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As shown in the figure, the router 120 is in communication with the first modem 110 and 
the second modem 111. The router 120 may perform prioritization, filtering, packet 
routing, access control, and encryption. The router 120 of this example embodiment of 
the present invention uses a table (e.g., a routing or bridging table) and programmed 
routing rules stored in memory to detennine the next destination of a data packet. The 
table is a collection of information and may include information relating to which modem 
(e.g., modem 1 10 or 1 1 1 ) leads to particular groups of addresses (such as the 
addresses of the user devices connected to the customer LV power lines), the 
transformer bypass device, a backhaul point, another repeater, as well as the priorities 
for connections to be used, and rules for handling both routine and special cases of 
traffic (such as voice packets and/or control packets). Thus, in some embodiments 
information in the table may be used to determine which encryption key should be used 
to encrypt (or decrypt) a data packet. 

[0039] The router 120 will detect routing infomiation, such as the destination 
address (e.g., the destination IP address) and/or other packet information (such as 
information identifying the packet as voice data), and match that routing information with 
rules (e.g., address rules) in the table. Depending on the architecture of the device, the 
mies may used to detenmlne that packets in a particular group of addresses should be 
processed in a particular manner such as transmitted in a specific direction such as 
through the second modem 1 1 1 (e.g., if the packet has a destination IP address that 
conresponds to a user device connected to the LV power line), be encrypted with a 
particular encryption key, and/or be ignored (e.g., if the address does not correspond to 
a user device connected to the LV power line). 

[0040] As an example, the table may include information such as the IP 

addresses (and potentially the MAC addresses) of the user devices on the repeater's 

LV subnet, and/or the MAC addresses of the power line modems 50 on the repeater's 
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LV subnet Alternatively, in the case in which the repeater is a MV repeater, the table 
may include infomnation of the MV subnet mask (which may include the MAC address 
and/or IP address of the device^s backhaul point 10 and one or more transfomier 
bypass devices). Based on the destination address of the packet (e.g., an IP address), 
the router may pass the packet to the first modem 110. the second modem 1 1 1 , or 
ignore the packet. Alternatively, if the IP destination address of the packet matches the 
IP address of the repeater 100, the repeater 100 may process the packet as a request 
for data or other command. Thus, the repeater 100 may be designed for receiving and 
processing the commands described in the patent applications incorporated above, 
which may be transmitted by a power line server having a network element manager. 

[0041] The router 120 may also prioritize transmission of packets. For 
example, data packets detemriined to be voice packets may be given higher priority for 
transmission through the repeater 100 than other data packets so as to reduce delays 
and improve the voice connection experienced by the user. Routing and/or prioritization 
also may be based on IP addresses, MAC addresses, subscription level, or a 
combination thereof (e.g., the MAC address of the power line modem or IP address,of 
the user device). 

[0042] In addition, the router 120 (or in the memory accessed by a separate 

processor communicating with the router 120) may include a dynamic host configuration 

protocol (DHCP) server. When a user installs a new user device (and power line 

modem) on the LV subnet attached to the repeater 100, the user device may need to be 

provisioned to identify itself on the network. To do so in this embodiment, the new user 

device transmits a DHCP request, which is received and routed by the repeater to the 

DHCP server. In response to the request, the repeater 100 may respond by 

transmitting to the user device the IP address and subnet mask for the user device, the 

gateway IP address for the device's network interface to be used as the networi^ 
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gateway (e.g., the IP address of the modem 1 1 1 of the repeater 100), and the IP 
addresses of the Domain Name Servers (DNS) all of which may be stored in memory by 
the user device. In addition, the repeater may transmit a "new user device" alert to a 
power line server (PLS) communicatively coupled to the PLSC. 

[0043] Likewise, when first installed on the network, the repeater 100 may 
transmit a DHCP request, which is received and routed by a PLC device on the PLC 

■ 

network and routed to a DHCP server. In response to the'request, the DHCP server 
may respond by transmitting to the repeater 100 the IP address and subnet mask for 
the repeater 100, and the gateway IP address for the repeater's network interface to be 
used as the network gateway {e.g., the IP address of the PLC device) all of which are 
stored in memory by the repeater. In addition, the PLC device may transmit a "new 
device" alert to the PLS. 

[0044] In addition, the router 120 may include a module for perfomning network 
address translation (NAT). The router 120 may be configured to translate the 
destination address (e.g., an IP address) of a packet received from the PLC network 
side of the network to the address of the user device (or power line modem) on the 
customer premises side. If there is more than one user device, the translation may 
require additional infomiation in the packet - such as information identifying a port - to 
allow the router 120 to determine the IP address corresponding to the user device that 
should replace the existing destination address in the packet. Similarly, the router may 
be configured to translate the destination of a packet received from the user device that 
is intended for the networi^. 

[0045] Other embodiments of the invention may include a single modem that is 

programmed to attempt to decrypt each data packet using a first encryption key. If the 

decryption is successful, the modem may then encrypt the data packet using a second 

encryption key and subsequently transmit the encrypted packet over the power line. If 
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the decryption with the first encryption key is not successful, the modem may then 
attempt to decrypt the received packet using a second encryption key. If the decryption 
using the second encryption key is successful, the modem may then encrypt the data 
packet using the first encryption key and subsequently transmit the encrypted packet 
over the power lines. If neither decryption is successful, the packet may be ignored. 

[0046] Thus, the use of multiple encryption keys permits the creation of multiple 
logical networks. While these embodiments include two encryption keys, other 
embodiments may use three, four, or more encryption keys to create, and for use with, 
three, four, or more logical networks. 

[0047] Such an embodiment, which is shown in Figure 4, may be useful when 
the repeater 100 is communicatively coupled to the LV power lines near the distribution 
transformer 40 (e.g., where the LV power lines converge from multiple subscriber 
premises). Thus, the repeater may be in communication with multiple user devices at 
different customer premises 15a-c via the LV power lines. Each encryption key may be 
used to decrypt and encrypt data for the user device (or another repeater) in the 
customer premises 1 5a-c thereby forming a separate logical network for each customer 
premises 15a-c. Consequently, this embodiment may provide isolation of the user 
devices of one customer premises 15a from the devices of the other customer premises 
15b-c, and vice versa. In addition, a particular customer premises 15a-c may have 
multiple user devices (or groups thereof) with each user device (or group of user 
devices) using a different encryption key and thereby being on a separate logical 
network as described herein. In addition, a device in communication with user devices 
in multiple customer premises that uses different encryption keys for each logical 
network may take the form of a transformer bypass device (described in the 
incorporated applications) instead of a repeater. 
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[0048] In addition, the repeater 1 00 of this embodiment may transmit data 
upstream through the distribution transformer 40 for reception by one or more PLC 
network devices communicatively coupled to the MV power line such as a transformer 

4 

I 

bypass device 30, a MV repeater, or a backhaul device. Likewise, the one or more PLC 
network devices communicatively coupled to the MV power line may communicate 
downstream through the distribution transfomner to the repeater 100. 

[0049] Furthermore, the repeater 100 (or bypass device) may communicate 
with the user devices in numerous customer premises 15a-c via an optic fiber, a digital 
subscribe line (DSL), a coaxial cable, or wirelessly as opposed to via the LV power lines 
(or in addition to the internal LV power lines). 

[0050] Likewise, some embodiments may be comprised of three, four or more 
modems that are coupled together such as via a router. In addition, alternate 
embodiments may use an algorithm, which simultaneously (or contemporaneously) 
attempts to decrypt with multiple keys (e.g., all the encryption keys available). 

[0051] The LV repeater embodiment may be communicatively coupled to the 
LV power line near the customer premises 15a-c or near (e.g., adjacent) the distribution 
transfomner such as mounted on a utility pole or in, on, or to a transfomrier enclosure. If 
mounted near the transformer, the repeater 100 may be configured to provide 
communications for a user device in the customer premises over the LV power line. In 
addition, the repeater mounted near the transformer may transmit through the 
transfonmer onto the MV power line to provide communications between the user device 
and a MV PLC device such as a transformer bypass device (e.g., bypassing a different 
transformer), a backhaul point, a communication interface device (as described in the 
incorporated references), or a MV repeater. 

[0052] In still another embodiment in which the present Invention may be 

comprised of a single modem, the modem selects an encryption key based on 
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information present in the packet (e.g., in the header of the packet) and information 
stored in memory (e.g., in the routing or bridge table). After decryption, the packet is 
encrypted using a different encryption key, which may be selected (e.g., retrieved from 
memory) based on programming and information stored in memory. After encryption, 
the packet is transmitted over the power line. In either single modem embodiment, the 
repeater 100 may also include a router that receives the decrypted packet from the 
modem and processes it as described above prior to, and to determine whether to, 
supply the packet back to the modem. 

[0053] As will be evident from the above description, the repeater may be 
communicatively coupled (e.g., via the LV power lines) to a plurality of power line 
modems and associated user devices. Each modem (and associated user device) may 
use a different encryption key to create multiple logical networks. Alternatively, each 
user device may use the same encryption key (to permit networking between user 
devices) and the modems may only repeat data packets (using a different encryption 
key) with its address. Alternatively, one modem of the repeater and some subset of the 
user devices may use the same key (while other user devices use different keys), 
thereby permitting networking between the subset of user devices and to prevent the 
other devices from accessing the extemal PLC network. 

[00541 Preferably, although not necessarily, the components of the repeater 
(perhaps excluding the coupler) are housed in an enclosure to provide environmental 
protection. The repeater 100 also may include a serial port, Ethemet port, USB, or a 
wireless transceiver to permit network personnel to access a processor in the repeater 

* 

and to communicate with (or through) the user devices and network devices with which 

the repeater 100 is communicatively coupled. 

[0055] Typically, each customer premises will be served by two LV energized 

conductors and a neutral conductor. The two LV energized conductors each carry 120V 
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referenced to ground and are 1 80 degrees out of phase with each other to provide 240V 

potential between the two LV energized conductors. After the LV energized conductors 

enter the customer premises, typically only one LV energized conductor will be present 

at each wall socket where a power line modem or repeater might be installed (e.g., 

plugged in). Given this fact regarding the internal customer premises wiring, there is no 

way to know to which LV energized conductor the power line modem (and user device) 

or repeater will be connected. In addition, the subscriber may move the power line 

modem and user device to another socket to access the PLCS and the new socket may 

be coupled to the second (different) LV energized conductor. Given these facts, the 

network designer must supply communications on both LV energized conductors and, 

therefore, would be motivated to simultaneously transmit the PLC RF data signal on 

each LV energized conductor referenced to the neutral conductor. However, in 

comparison to transmitting the RF data signals on both energized conductors 

referenced to the neutral, the following method of providing communications on the LV 

energized has been found to provide improved performance. 

[0056] Figure 5 illustrates an embodiment of a transmit circuit for transmitting 

the data signal provided by the repeater 100. Components to the left of the dashed line 

in Figure 5c may be inside the repeater enclosure and those to the right may be outside 

the repeater enclosure. The transmit circuit of this embodiment (that forms part of or 

receives signals from a modem in the repeater) is comprised of a transformer that 

drives one conductor pair 43, which traverse through a common mode choke. The 

common mode choke provides a very low impedance to differential currents in the two 

conductors 43a,b, but provides a significant or high impedance to common mode 

currents (i.e., currents traveling in the same direction such as In or out). The two 

conductors 43a,b may also be coupled to ground by an impedance Z3, which may be a 

resistive impedance. In addition, each conductor 43a,b includes a series impedance 
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Z1 , which may be a capacitive impedance, or other low pass filter component(s), for 
impeding the 60 Hz power signal and permitting the RF data signal to pass unimpeded. 
Such impedances may be on either side of the common mode choice, but are preferably 
on the LV power line side of the choke. 

[0057] In either embodiment, each conductor may also include a surge 
protection circuit, which in Figure 5 are shown as S1 and S2. Finally, the cable 43 may 
be comprised of a twisted pair of conductors between the repeater enclosure and LV 
power line. As will be evident to those skilled in the art, the twisted pair cable 43 may 
have an impedance (determined by the geometry of the cable) as represented by Z2. 
This impedance 72 may be modeled by a resistive component and an inductive 
component The inductive component also may cause coupling between the two 
twisted wired conductors. 

[0058] While not shown in the figures, the transmit circuit of either embodiment 
may also include a fuse in series with each conductor and a voltage limiting device, 

» 

such as a pair of oppositely disposed zener diodes, coupled between the pair of 
conductors and may be located between the common mode choke and the transfomier. 
Finally, one of the conductors of the repeater cable(s) 43 may be used to supply power 
to the power supply of the repeater 100 to power the modem(s) and other components 
of the repeater 100. 

[0059] While these embodiments of the invention may drive the first and 
second LV energized conductors differentially to transmit the data signal (e.g., using 
OFDM), the power line modem (or indoor repeater) may transmit data signals from the 
customer premises to the repeater 1 00 by applying the data signal to one conductor 
(e.g., one energized conductor) referenced to the other conductor such as the ground 
and/or neutral. 
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[0060] While in this embodiment the two energized conductors are opposite in 
magnitude, other embodiments may phase shift the signal on one conductor by forty- 
five degrees, ninety degrees, one hundred twenty degrees, one hundred eighty 
degrees, or some other value, in addition to or instead of differentially driving the two 
conductors. 

[0061] The foregoing has described the principles, embodiments, and modes of 
operation of the present invention. However, the invention should not be construed as 
being limited to the particular embodiments described above, as they should be 
regarded as being illustrative and not as restrictive. It should be appreciated that 
variations may be made in those embodiments by those skilled In the art without 
departing from the scope of the present invention. 

[0062] While a pretended embodiment of the present invention has been 
described above, It should be understood that it has been presented by way of example 
only, and not limitation. Thus, the breadth and scope of the present invention should 
not be limited by the above described exemplary embodiments. Similariy, while the 
prefenred embodiment employs different encryption keys to isolate for various logical 
networks other embodiments may use other methods of isolating the logical networks. 
For example, a LV repeater (or other PLC device such as a bypass device) of another 
embodiment may use a first modulation scheme to communicate with the user device 
and another modulation scheme to communicate with another PLC device (e.g., a 
bypass device). In addition, or instead of, or in addition using different modulation 
schemes, the invention may use different fon/vard error correction coding rates for each 
logical network. Thus, different modulation schemes, encryption, keys, and/or fonA/ard 
error correction coding rates can be used to provide isolation of each logical networi^. 

[0063] Obviously, numerous modifications and variations of the invention are 

possible in light of the above teachings. It is therefore to be understood that within the 
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scope of the appended claims, the invention may be practiced othen/vise than as 
specifically described herein. 
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What is Claimed: 

1 . A device for communicating data over a power line, tlie device comprising: 
a first modem communicatively coupled to the power line; and 

a second modem communicatively coupled to the power line and said firet 
modem, wherein said first modem is configured to decrypt data received from the power 
line using a first encryption key and to communicate the data decrypted with the first 
encryption key to said second modem, and wherein said second modem is configured 
to decrypt data received from the power line using a second encryption key and to 
communicate the data decrypted with the second encryption key to said first modem. 

2. The device of claim 1 , wherein said first modem is configured to encrypt 
data received from said second modem using said first encryption key and to transmit 
said encrypted data over the power line. 

3. The device of claim 2, wherein said second modem is configured to 
encrypt data received from said first modem using said second encryption key and to 
transmit said encrypted data over the power line. 

4. The device of claim 3, wherein the data transmitted over the power line by 

4 

said first modem is transmitted to a transformer bypass device. 

5. The device of claim 4, wherein the data received from the power line by 
said first modem is received from a transformer bypass device. 

6. The device of claim 1 , wherein the data received from the power line by 
said first modem is received from a transfomner bypass device. 

7. The device of claim 1 , wherein the power line carries a voltage less than 
one thousand volts. 

8. The device of claim 1 , wherein the power line carries a voltage greater 
than one thousand volts. 
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9. The device of claim 1 , furtlier comprising a router in communication with 
said first modem and said second modem. 

10. The device of claim 9, wherein said communication from said first modem 
to said second modem and from said second modem to said first modem is controlled, 
at least in part, by said router. 

1 1 . The device of claim 9, wherein said router is configured to perform 
network address translation of said decrypted data. 

12. The device of claim 1 1 , wherein said data includes information of a port. 

13. The device of claim 1 , wherein said first modem is communicatively 
coupled to the power line to communicate data signals over the power line by 
differentially transmitting said data signals on a first power line conductor and a second 
power line conductor. 

14. The device of claim 1 3, wherein the first power line conductor is an 
energized conductor and the second power line conductor is an energized conductor. 

1 5. The device of claim 3, further comprising a router in communication with 
said first modem and said second modem. 

1 6. The device of claim 1 , wherein said communication from said first modem 
to said second modem and from said second modem to said first modem is via an 
Ethernet data path. 

1 7. A method of communicating data over a power line, the method 
comprising: 

receiving data from the power line; 
decrypting the data using a first encryption key; 
encrypting the data using a second encryption key; and 
transmitting the encrypted data over the power line. 
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18. The method of claim 17, further comprising translating a network address 
of said decrypted data. 

19. The method of claim 18, wherein said data Includes information of a port. 

20. The method of claim 17, wherein said transmitting comprises differentially 
transmitting a data signal representing said encrypted data on a first power line 
conductor and a second power line conductor. 

21 . The method of claim 20, wherein the first power line conductor is an 
energized conductor and the second power line conductor is an energized conductor. 

22. A method of communicating data over a power line, the method 
comprising: 

receiving data from the power line; 

attempting to decrypt the received data using a first encryption key; 

detennining whether the data has been decrypted by the first encryption key; 

if decryption of the data using the first encryption key is successful, encrypting 
the decrypted data using a second encryption key; 

attempting to decrypt the received data using a second encryption key; 

detenfnining whether decryption of the received data using the second encryption 
key is successful; 

if decryption of the data using the second encryption key is successful, 
encrypting the decrypted data using the first encryption key; and 
transmitting the encrypted data over the power line. 

23. The method of claim 22, further comprising translating a network address 
of said decrypted data. 

24. The method of claim 23, wherein said data includes information of a port. 
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25. The method of claim 22, wherein said transmitting comprises differentially 
transmitting a data signal representing said encrypted data on a first power line 
conductor and a second power line conductor. 

26. The method of claim 25, wherein the first power line conductor is an 
energized conductor and the second power line conductor is an energized conductor. 

27. A method of communicating data over a power line, the method 
comprising: 

receiving data from the power line; 

attempting to decrypt the received data using a first encryption key; 
determining whether decryption of the received data using the first encryption key 
is successful; 

if decryption of the data using the first encryption key is successful, encrypting 
the decrypted data using a second encryption key; . 

if decryption of the data using the first encryption key Is not successful 
perfomiing steps a through c: 

(a) attempting to decrypt the received data using a second encryption key, 

(b) determining whether decryption of the received data using the second 
encryption key is successful, 

(c) if decryption of the data using the second encryption key is successful, 
encrypting the decrypted data using the first encryption key, and 

transmitting the encrypted data over the power line. 

28. A method of communicating data over a power line, the method 
comprising: 

receiving data from the power line; 

selecting one of a plurality of encryption keys to decrypt the received data; 

decrypting said received data with said selected encryption key; 
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encrypting said data with a second encryption key; and 
transmitting the encrypted data over the power line. 

29. The method of claim 28, wherein said selecting comprises attempting to 
decrypt said data with said one of said plurality of encryption keys. 

30. The method of claim 28, wherein said selecting comprises attempting to 
decrypt said data with said plurality of encryption keys. 

31 . The method of claim 29, wherein said selecting further comprises 
determining whether said attempting to decrypt said data with said one of said plurality 
of encryption keys is successful. 

32. The method of daim 31 , wherein said selecting further comprises: 

if said attempting to decrypt said data with said one of said plurality of encryption 
keys is not successful, attempting to decrypt said data with another of said plurality of 
encryption keys. 

33. The method of claim 28, wherein at least some of said plurality of 
encryption keys are associated with different communication devices in different 
subscriber premises. 

34. The method of claim 28, further comprising translating a network address 
of said received data. 

35. The method of claim 34, wherein said received data includes information 
of a port. 

36. The method of claim 28, wherein said step of transmitting comprises 
differentially transmitting a data signal representing the encrypted data on a first power 
line conductor and a second power line conductor. 

37. The method of claim 36, wherein the first power line conductor is an 
energized conductor and the second power line conductor is an energized conductor. 

38. A device for communicating data over a power line, the device comprising: 
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a first modem communicatively coupled to the power line, wherein said first 
modem is configured to encrypt data using one of a plurality of encryption l<eys and to 
communicate encrypted data to the power line; and 

said encryption key used to encrypt said data is based on a destination address 
associated with the data. 

39. The device of claim 38, wherein said first modem is configured to decrypt 
data received from the power line using one of said plurality of encryption keys. 

40. The device of claim 39, further comprising a second modem and wherein 
said data decrypted by said first modem is communicated to said second modem. 

41 . The device of claim 40, wherein said second modem Is configured to 
communicate said data received from said first modem to the medium voltage power 
line. 

42. A method of communicating data over a power line, the method 
comprising: 

4 

receiving data from the power line; 

attempting to decrypt the received data using a first encryption key; 
detemiining whether decryption of the received data using the first encryption key 
is successful; 

if decryption of the data using the first encryption key Is successful, encrypting 
the decrypted data using a second encryption key; 

if decryption of the data using the first encryption key is not successful 
performing steps a and b: 

(a) decrypting the received data using a second encryption key, 

(b) encrypting the decrypted data using the firet encryption key; and 
transmitting the encrypted data over the power line. 
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43. The method of claim 42, further comprising translating a network address 
of said decrypted data. 

44. The method of claim 43, wherein said data includes Information of a port. 

45. The method of claim 42, wherein said transmitting comprises differentially 
transmitting a data signal representing said encrypted data on a first power line 
conductor and a second power line conductor. 

46. The method of claim 45, wherein the first power line conductor is an 
energized conductor and the second power line conductor is an energized conductor. 

47. A method of providing communications to a first and second device in a 
power line communications system having a power line, comprising: 

encrypting first data using a first encryption key; 

transmitting said encrypted first data over the power line for reception by the first 
device; 

encrypting second data using a second encryption key; and 
transmitting said encrypted second data over the power line for reception by the 
second device. 

48. The method of claim 47, further comprising at the first device: 
receiving said encrypted second data; 

attempting to decrypt said encrypted second data with the first encryption key; 

and 

determining that said attempt to decrypt said encrypted second data was 
unsuccessful. 

49. The method of claim 48, further comprising at the first device: 
receiving said encrypted first data; 

attempting to decrypt said encrypted first data with the first encryption key; and 

determining that said attempt to decrypt said encrypted first data was successful. 
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50. The method of claim 47, further comprising at the first device: 
receiving said encrypted first data; 

attempting to decrypt said encrypted first data with the first encryption l<ey; and 
determining that said attempt to decrypt said encrypted first data was successful. 
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